Apple Macos Sonoma vulnerabilities

CVE-2025-43355 [MEDIUM] CVE-2025-43355: macOS Sonoma 14.8 Apple Security Update: About the security content of macOS Sonoma 14.8 Product: macOS Sonoma Version: 14.8 CVE: CVE-2025-43355 Component: MobileStorageMounter Impact: An app may be able to cause a denial-of-service Description: A type confusion issue was addressed with improved memory handling.

CVE-2024-23239 [MEDIUM] CVE-2024-23239: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23239 Component: Sandbox Impact: An app may be able to leak sensitive user information Description: A race condition was addressed with improved state handling.

CVE-2023-27952 [MEDIUM] CVE-2023-27952: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2023-27952 Component: Safari Impact: An app may bypass Gatekeeper checks Description: A race condition was addressed with improved locking.

CVE-2023-41997 [MEDIUM] CVE-2023-41997: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-41997 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2023-41982 [MEDIUM] CVE-2023-41982: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-41982 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2024-23275 [MEDIUM] CVE-2024-23275: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23275 Component: PackageKit Impact: An app may be able to access protected user data Description: A race condition was addressed with additional validation.

CVE-2024-40818 [MEDIUM] CVE-2024-40818: macOS Sonoma 14.6 Apple Security Update: About the security content of macOS Sonoma 14.6 Product: macOS Sonoma Version: 14.6 CVE: CVE-2024-40818 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2024-23251 [MEDIUM] CVE-2024-23251: macOS Sonoma 14.5 Apple Security Update: About the security content of macOS Sonoma 14.5 Product: macOS Sonoma Version: 14.5 CVE: CVE-2024-23251 Component: Mail Impact: An attacker with physical access may be able to leak Mail account credentials Description: An authentication issue was addressed with improved state management.

CVE-2023-42843 [MEDIUM] CVE-2023-42843: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42843 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2024-23273 [MEDIUM] CVE-2024-23273: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23273 Component: Safari Private Browsing Impact: Private Browsing tabs may be accessed without authentication Description: This issue was addressed through improved state management.

CVE-2023-35984 [MEDIUM] CVE-2023-35984: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-35984 Component: Bluetooth Impact: An attacker in physical proximity can cause a limited out of bounds write Description: The issue was addressed with improved checks.

CVE-2025-24279 [MEDIUM] CVE-2025-24279: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24279 Component: Voice Control Impact: An app may be able to access contacts Description: This issue was addressed with improved file handling.

CVE-2024-44260 [MEDIUM] CVE-2024-44260: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44260 Component: Assets Impact: A malicious app with root privileges may be able to modify the contents of system files Description: This issue was addressed by removing the vulnerable code.

CVE-2025-43336 [MEDIUM] CVE-2025-43336: macOS Sonoma 14.8.2 Apple Security Update: About the security content of macOS Sonoma 14.8.2 Product: macOS Sonoma Version: 14.8.2 CVE: CVE-2025-43336 Component: SoftwareUpdate Impact: An app with root privileges may be able to access private information Description: A permissions issue was addressed with additional restrictions.

CVE-2023-42952 [MEDIUM] CVE-2023-42952: macOS Sonoma 14.1 Apple Security Update: About the security content of macOS Sonoma 14.1 Product: macOS Sonoma Version: 14.1 CVE: CVE-2023-42952 Component: Automation Impact: An app with root privileges may be able to access private information Description: The issue was addressed with improved checks.

CVE-2025-24199 [MEDIUM] CVE-2025-24199: macOS Sonoma 14.7.5 Apple Security Update: About the security content of macOS Sonoma 14.7.5 Product: macOS Sonoma Version: 14.7.5 CVE: CVE-2025-24199 Component: Foundation Impact: An app may be able to cause a denial-of-service Description: An uncontrolled format string issue was addressed with improved input validation.

CVE-2024-27853 [HIGH] CVE-2024-27853: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-27853 Component: CVE-2024-23225 Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: This issue was addressed with improved checks.

CVE-2023-41979 [MEDIUM] CVE-2023-41979: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41979 Component: XProtectFramework Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with improved locking.

CVE-2024-23293 [MEDIUM] CVE-2024-23293: macOS Sonoma 14.4 Apple Security Update: About the security content of macOS Sonoma 14.4 Product: macOS Sonoma Version: 14.4 CVE: CVE-2024-23293 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed through improved state management.

CVE-2024-44137 [MEDIUM] CVE-2024-44137: macOS Sonoma 14.7.1 Apple Security Update: About the security content of macOS Sonoma 14.7.1 Product: macOS Sonoma Version: 14.7.1 CVE: CVE-2024-44137 Component: Screen Capture Impact: An attacker with physical access may be able to share items from the lock screen Description: The issue was addressed with improved checks.